CVE-2025-60492

GPAC Project/MP4Box versions before 2.5 are vulnerable to a stack overflow within the gf_bifs_dec_node function located in /bifs/field_decode.c. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted MP4 file . While the provided documents confirm the e...

CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Stack-Based Overflow to Remote-Code Execution via execution-flow hijacking & multiple-register manipulation exploitation; CVEs are: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marked as N1 - N7 rop.py make sure you hosted...

EUVD-2026-105322

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within "curlmimefree" leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host proces...

CVE-2026-92391

The libcurl library is vulnerable to a stack overflow caused by excessive recursion depth within the curl_mime_free function. An attacker can exploit this by providing a deeply nested multipart MIME structure via the public API, which leads to unbounded stack frame allocation during normal cleanu...

CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

CVE-2026-92391

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

CVE-2023-26976_tenda_AC6_stack_overflow

This repository does not have a README...

CVE-2026-113650 ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)

ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an is not allowed and disallowedTagsMode is 'discard' the defaults, its raw-text content is re-sanitized by a recursive call to sanitizeHtmltext, options. The recursion has no bound and starts each...

CVE-2026-113650

The ApostropheCMS Node.js content management system is vulnerable in the sanitize-html 2.18.0 component due to unbounded recursion . When an is disallowed and disallowedTagsMode is set to 'discard' (the default), the raw-text content undergoes a recursive re-sanitization via sanitizeHtml(text, o...

CVE-2026-93119

A flaw was found in the kernel. Specifically, within the USB LJCA driver's ljcaenumerategpio function, an attacker with a specially crafted malicious LJCA device could provide an unbounded banknum value. This improper handling of input leads to a stack overflow, which could result in a denial of...

SUSE-SU-2026:4754-1 Security update for python3

This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside the installation...

CVE-2023-25234_Tenda_AC6_stack_overflow

This repository does not have a README...

CVE-2026-86919

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code...

CVE-2026-86919

A stack overflow vulnerability exists in the Core Bluetooth component, which was addressed by implementing improved input validation. An attacker utilizing a paired Bluetooth device could potentially leverage this flaw to execute arbitrary code . This issue has been remediated in the following ve...

CVE-2026-86919

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code...

EUVD-2026-104719

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code...

CVE-poc-update

CVE-poc-update CVE-2023-46371 and CVE-2023-46527 update CVE-2023-46371: A new device is discovered containing the same vulnerability:CVE-2023-46371 vulnerability was discovered on TPWR886N 2.0.12 device.TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 have a stack overflow vulnerability via...

openSUSE 16 Security Update : jq (openSUSE-SU-2026:21833-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21833-1 advisory. - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770...